Agent skill · security · aradotso
vibe-security-skill
Agent skill that audits vibe-coded apps for common security vulnerabilities introduced by AI coding assistants
Why this skill is useful
Adds executable scripts for auditing security vulnerabilities in vibe-coded applications that AI may not recognize.
What it needs
Requires npx installed locally. About 6k tokens when loaded. Last updated 2026-08-04. 11 stars on the source repository.
What this skill does
Vibe Security Skill Skill by ara.so — Security Skills collection. This skill provides expertise in using the Vibe Security tool to audit vibe-coded applications for common security vulnerabilities that AI coding assistants frequently introduce. It helps identify hardcoded secrets, missing RLS policies, insecure auth patterns, payment vulnerabilities, and other security anti-patterns. What Vibe Security Does Vibe Security is an agent skill that scans codebases for security vulnerability patterns common in AI-generated code. It uses technology-specific reference files to audit only relevant parts of your stack (Supabase, Stripe, React Native, etc.), catching issues like: Hardcoded API keys and secrets Disabled or missing Row-Level Security (RLS) policies Insecure authentication patterns Client-submitted payment amounts Missing rate limiting Tokens stored in localStorage Exposed secrets in mobile bundles AI API keys without usage caps Installation For Claude Code For OpenAI Codex Select "Codex" when prompted. Manual Installation Usage Triggering Security Audits Claude Code: Or use natural language: "check my code for security issues" "is this safe?" "audit this Supabase setup" Codex: Automatic Activation The skill automatically activates when working with: Authentication flows Payment processing Database queries API key configuration User data handling Environment variables Key Security Checks 1. Secrets & Environment Variables Bad Pattern: Good Pattern: 2. Supabase Row-Level Security Bad Pattern: Good Pattern: 3. Authentication & Authorization Bad Pattern: Good Pattern: 4. Payment Security Bad Pattern: Good Pattern: 5. Rate Limiting Bad Pattern: Good Pattern: 6. Mobile Security (React Native / Expo) Bad Pattern: Good Pattern: 7. SQL Injection & Data Access Bad Pattern: Good Pattern: Configuration Vibe Security uses reference files organized by technology. The skill automatically detects your stack and applies relevant checks. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/vibe-security-skill